MAL-2023-902 Malicious code in trint-bbc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f755e08a2f5b395630482a2784cdf65bd712c263238d4df7302e087c47be52e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-515 Malicious code in idgit-conventional-commitsentity-obj-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e21720cf9a4946dccc8cfaf2aeecb605fa378ec130a4c251054a6867ebd163ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-706 Malicious code in prpostcss-loaderetty-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee67ba2a4127a635013cb8ab79bc1d748c3756aeb2271056f1a97d70a21d4b2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fuji Electric FRENIC RHC Loader 代码问题漏洞

Fuji Electric FRENIC RHC Loader is a software tool developed by Fuji Electric Japan for debugging and monitoring inverters, mainly serving the industrial automation field. The Fuji Electric FRENIC RHC Loader suffers from an XML external entity reference vulnerability that can be exploited by an...

Citrix StoreFront Server XXE (CTX477616)

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

MAL-2023-740 Malicious code in reat-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a3d57163b34785a2092a45dcf9e0e1601b827c144a5a955212214317de9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easy-lightbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539cde116686125274f12080c38227ec92eb6caba54c38acc1f72cedab4a69a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-299 Malicious code in easy-lightbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539cde116686125274f12080c38227ec92eb6caba54c38acc1f72cedab4a69a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2023-27554)

Summary Security Bulletin: IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to an XML External Entity XXE Injection vulnerability CVE-2023-27554. This has been addressed in the remediation section below. Vulnerability Details...

Medium: libplist

Issue Overview: A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The name of the patch is...

Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console

Summary IBM Security Verify Governance uses IBM WebSphere Application Server. The fix includes upgrading IBM WebSphere Application Server with the security patch. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server traditional shipped with IBM Intelligent Operations Center(CVE-2023-27554)

Summary IBM WebSphere Application Server traditional is shipped with IBM Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in...

MAL-2023-708 Malicious code in pruebalol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cf513acc5df2380e286ca7e3d2c858c9c876dd21e8cd65607881d2c3072f75e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-642 Malicious code in npm-webcomponent-murphysms1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0b45d45606aecca3af110b2638a8f962450a6fae54797e117c100285423dbaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pruebalol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd33e19a8d7f91573d342ed9810411e553657b41394227fd9e33600c45e8f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-682 Malicious code in pitito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c402c7c9c4bff455910dd1b71d4c8d9cb7e47b0daa68d4d68eedf1649965afb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2023-27554)

Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

MAL-2023-942 Malicious code in vpro-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-203 Malicious code in compute-starter-kit-assemblyscript-default (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d22fdf2ac6654a503fea802f494a8beb6fecb1b7b953919da1d01cd04e133958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-77 Malicious code in actblue-contributions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c0c6e92bdaf9e2ee8c02ef7116bf05898e212a64ff12c21e8990a350ee768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...